Question 1

SmartEvent Security Checkups can be run from the following Logs and Monitor activity:

Accepted Answer

A)  Reports 
B)  Advanced 
C)  Checkups 
D)  Views

Question 2

Which command will allow you to see the interface status?

Accepted Answer

A)  cphaprob interface 
B)  cphaprob -I interface 
C)  cphaprob -a if 
D)  cphaprob stat

Question 3

Which of the following will NOT affect acceleration?

Accepted Answer

A)  Connections destined to or originated from the Security gateway 
B)  A 5-tuple match 
C)  Multicast packets 
D)  Connections that have a Handler (ICMP, FTP, H.323, etc.)

Question 4

Which statement is true about ClusterXL?

Accepted Answer

A)  Supports Dynamic Routing (Unicast and Multicast) 
B)  Supports Dynamic Routing (Unicast Only) 
C)  Supports Dynamic Routing (Multicast Only) 
D)  Does not support Dynamic Routing

Question 5

SandBlast agent extends 0 day prevention to what part of the network?

Accepted Answer

A)  Web Browsers and user devices 
B)  DMZ server 
C)  Cloud 
D)  Email servers

Question 6

How long may verification of one file take for Sandblast Threat Emulation?

Accepted Answer

A)  up to 1 minutes 
B)  within seconds cleaned file will be provided 
C)  up to 5 minutes 
D)  up to 3 minutes

Question 7

Joey want to configure NTP on R80 Security Management Server. He decided to do this via WebUI. What is the correct address to access the Web UI for Gaia platform via browser?

Accepted Answer

A) https:// B) http://:443 C) https://:10000 D) https://:4434

Question 8

SecureXL improves non-encrypted firewall traffic throughput and encrypted VPN traffic throughput.

Accepted Answer

A)  This statement is true because SecureXL does improve all traffic. 
B)  This statement is false because SecureXL does not improve this traffic but CoreXL does. 
C)  This statement is true because SecureXL does improve this traffic. 
D)  This statement is false because encrypted traffic cannot be inspected.

Question 9

To fully enable Dynamic Dispatcher with Firewall Priority Queues on a Security Gateway, run the following command in Expert mode then reboot:

Accepted Answer

A)  fw ctl multik set_mode 1 
B)  fw ctl Dynamic_Priority_Queue on 
C)  fw ctl Dynamic_Priority_Queue enable 
D)  fw ctl multik set_mode 9

Question 10

Fill in the blank: The R80 utility fw monitor is used to troubleshoot ________.

Accepted Answer

A)  User data base corruption 
B)  LDAP conflicts 
C)  Traffic issues 
D)  Phase two key negotiations

Question 11

Security Checkup Summary can be easily conducted within:

Accepted Answer

A)  Summary 
B)  Views 
C)  Reports 
D)  Checkups

Question 12

Firewall policies must be configured to accept VRRP packets on the GAiA platform if it runs Firewall software. The Multicast destination assigned by the Internet Assigned Number Authority (IANA) for VRRP is:

Accepted Answer

A)  224.0.0.18 
B)  224.0.0.5 
C)  224.0.0.102 
D)  224.0.0.22

Question 13

Which command is used to set the CCP protocol to Multicast?

Accepted Answer

A)  cphaprob set_ccp multicast 
B)  cphaconf set_ccp multicast 
C)  cphaconf set_ccp no_broadcast 
D)  cphaprob set_ccp no_broadcast

Question 14

The fwd process on the Security Gateway sends logs to the fwd process on the Management Server via which 2 processes?

Accepted Answer

A)  fwd via cpm 
B)  fwm via fwd 
C)  cpm via cpd 
D)  fwd via cpd

Question 15

How many interfaces can you configure to use the Multi-Queue feature?

Accepted Answer

A)  10 interfaces 
B)  3 interfaces 
C)  4 interfaces 
D)  5 interfaces

Question 16

Which of the following is NOT an attribute of packet acceleration?

Accepted Answer

A)  Source address 
B)  Protocol 
C)  Destination port 
D)  VLAN tag

Question 17

To accelerate the rate of connection establishment, SecureXL groups all connection that match a particular service and whose sole differentiating element is the source port. The type of grouping enables even the very first packets of a TCP handshake to be accelerated. The first packets of the first connection on the same service will be forwarded to the Firewall kernel which will then create a template of the connection. Which of the these is NOT a SecureXL template?

Accepted Answer

A)  Accept Template 
B)  Deny Template 
C)  Drop Template 
D)  NAT Template

Question 18

What statement best describes the Proxy ARP feature for Manual NAT in R80.10?

Accepted Answer

A)  Automatic proxy ARP configuration can be enabled 
B)  Translate Destination on Client Side should be configured 
C)  fw ctl proxy should be configured 
D)  local.arp file must always be configured

Question 19

When a packet arrives at the gateway, the gateway checks it against the rules in the hop Policy Layer, sequentially from top to bottom, and enforces the first rule that matches a packet. Which of the following statements about the order of rule enforcement is true?

Accepted Answer

A)  If the Action is Accept, the gateway allows the packet to pass through the gateway. 
B)  If the Action is Drop, the gateway continues to check rules in the next Policy Layer down. 
C)  If the Action is Accept, the gateway continues to check rules in the next Policy Layer down. 
D)  If the Action is Drop, the gateway applies the Implicit Clean-up Rule for that Policy Layer.

Question 20

What CLI utility runs connectivity tests from a Security Gateway to an AD domain controller?

Accepted Answer

A) test_connectivity_ad -d B) test_ldap_connectivity -d C) test_ad_connectivity -d D) ad_connectivity_test -d

Exam 3: Check Point Certified Security Expert - R80